Open Redirect in Host Authorization Middleware Detection

Specially crafted "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. !/usr/bin/env python3 -- coding: utf-8 -- """Specially crafted "X-Forwarded-Host" headers in...

Keystone 6 Login Page - Open Redirect and Cross-Site Scripting Detection

On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalated to reflected XSS. !/usr/bin/env python3 -- coding: utf-8 -- """On the login page, there is a "from=" parameter in URL which is vulnerable to open redirect and can be escalat.""" from...

WordPress Page Builder KingComposer <=2.9.6 - Open Redirect Detection

WordPress Page Builder KingComposer 2.9.6 and prior does not validate the id parameter before redirecting the user to it via the kcgetthumbn AJAX action which is available to both unauthenticated and authenticated users. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Page Builder...

Microweber < 1.2.11 - Open Redirection Detection

Open Redirect in Packagist microweber/microweber prior to 1.2.11. !/usr/bin/env python3 -- coding: utf-8 -- """Open Redirect in Packagist microweber/microweber prior to 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: in...

PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting Detection

PKP Open Journal Systems 2.4.8 to 3.3 contains a cross-site scripting vulnerability which allows remote attackers to inject arbitrary code via the X-Forwarded-Host Header. !/usr/bin/env python3 -- coding: utf-8 -- """PKP Open Journal Systems 2.""" from kittysploit import from...

Open Automation Software OAS Platform V16.00.0121 - Missing Authentication Detection

An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...

Open edX <2022-06-06 - Cross-Site Scripting Detection

Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in the logout URL. !/usr/bin/env python3 -- coding: utf-8 -- """Open edX before 2022-06-06 contains a reflected cross-site scripting vulnerability via the 'next' parameter in.""" from...

RStudio Connect - Open Redirect Detection

RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. The vulnerability could allow an attacker to redirect users to malicious websites. !/usr/bin/env python3 -- coding: utf-8 -- """RStudio Connect prior to 2023.""" import re from kittysploit import from...

EyouCMS 1.5.4 Open Redirect Detection

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. !/usr/bin/env python3 -- coding: utf-8 -- """EyouCMS 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

URL Shortify <= 1.12.1 - Open Redirect Detection

The URL Shortify plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.12.1 due to insufficient validation on the 'redirectto' parameter in the promotional dismissal handler. This makes it possible for unauthenticated attackers to redirect users to potentiall...

Apache Struts - Multiple Open Redirection Vulnerabilities Detection

Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """Apache Struts is prone to multiple open-redirection vulnerabilities because the application fails to properly ."...

Netsweeper 3.0.6 - Open Redirection Detection

An open redirect vulnerability in remotereporter/loadlogfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability in...

Xsuite <=2.4.4.5 - Open Redirect Detection

Xsuite 2.4.4.5 and prior contains an open redirect vulnerability, which can allow a remote attacker to redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the redirurl parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Xsuite 2.""" import re from...

WordPress StageShow <5.0.9 - Open Redirect Detection

WordPress StageShow plugin before 5.0.9 contains an open redirect vulnerability in the Redirect function in stageshowredirect.php. A remote attacker can redirect users to arbitrary web sites and conduct phishing attacks via a malicious URL in the url parameter. !/usr/bin/env python3 -- coding:...

Kentico CMS 8.2 - Open Redirect Detection

Kentico CMS 8.2 contains an open redirect vulnerability via GetDocLink.ashx with link variable. An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain. !/usr/bin/env python3 -- coding: utf-8 -- """Kentico CMS 8.""" import re from kittysplo...

Optergy Proton/Enterprise Building Management System - Open Redirect Detection

Optergy Proton/Enterprise Building Management System contains an open redirect vulnerability. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """Optergy...

GLPI <9.4.6 - Open Redirect Detection

GLPI prior 9.4.6 contains an open redirect vulnerability based on a regexp. !/usr/bin/env python3 -- coding: utf-8 -- """GLPI prior 9.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'GLPI 9.4.6 - Open...

Grav < 1.7 - Open Redirect Detection

Grav before 1.7 has an open redirect vulnerability via common/Grav.php. This is partially fixed in 1.6.23 and still present in 1.6.x. !/usr/bin/env python3 -- coding: utf-8 -- """Grav before 1.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

SAP Solution Manager - Open Redirect Detection

SAP Solution Manager contains an open redirect vulnerability via the logoff endpoint. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. !/usr/bin/env python3 -- coding: utf-8 -- """SAP Solution Manag...

SonicWall SonicOS 7.0 - Open Redirect Detection

SonicWall SonicOS 7.0 contains an open redirect vulnerability. The values of the Host headers are implicitly set as trusted. An attacker can spoof a particular host header, allowing the attacker to render arbitrary links, obtain sensitive information, modify data, execute unauthorized operations...